# DNSSEC causes DNS records to fail

**URL:** <https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994>\
**Category:** Help with Setup/Upgrade\
**Created:** [February 11, 2020, 12:05pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994 "2020-02-11T12:05:59Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![amicheals](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/a/a88e57/32.png) [@amicheals](https://discourse.mailinabox.email/u/amicheals)\
**Post date:** [February 11, 2020, 12:06pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/1 "2020-02-11T12:06:00Z")

</div>

I set up a new user. The DNS is hosted externally to miab.  
I set everything correctly and email was working,

Then, I set DNSSEC at my registrar and that broke the mail DNS records. I could no longer send or receive mail.

The DNSSEC records messed up my mail DNS records.

Do you know why that is and how I can set DNSSEC on a domain using external DNS that does not break DNS mail records?

---

<div class="post-metadata">

**Author:** ![alento](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/alento/32/1371_2.png) [@alento](https://discourse.mailinabox.email/u/alento)\
**Post date:** [February 11, 2020, 4:07pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/2 "2020-02-11T16:07:01Z")

</div>

> [@amicheals](#):
>
> Do you know why that is and how I can set DNSSEC on a domain using external DNS that does not break DNS mail records?

Remove the DNSSEC records. I suspect that you took them from the MiaB admin status page, right? @amicheals

---

<div class="post-metadata">

**Author:** ![amicheals](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/a/a88e57/32.png) [@amicheals](https://discourse.mailinabox.email/u/amicheals)\
**Post date:** [February 11, 2020, 5:27pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/3 "2020-02-11T17:27:25Z")

</div>

I removed the DNSSEC records and after a few hours, mail started working again.

I took it from the status email I got at night.

Is there another place for DNSSEC records or another way to do it? Or should I not set DNSSEC?

---

<div class="post-metadata">

**Author:** ![alento](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/alento/32/1371_2.png) [@alento](https://discourse.mailinabox.email/u/alento)\
**Post date:** [February 11, 2020, 5:34pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/4 "2020-02-11T17:34:48Z")

</div>

> [@amicheals](#):
>
> Is there another place for DNSSEC records or another way to do it?

Hi, sorry I had meant to offer more information but I got distracted.

DNSSEC is tied to the name server that you are using, so setting DNSSEC based on the information from the nightly status emails or from the status page of MiaB would be incorrect since in your case you are using an external DNS provider.

If you really want to enable DNSSEC, you would need to get the details from whomever is hosting your DNS. Personally, I do not bother as it can be more problem than it is worth (as you just saw).

If you have a domain that is likely to come under attack for political or even monetary reasons I would enable DNSSEC but for the little guy that is hosting email on a VPS using MiaB … you certainly would not be doing this if you had to be concerned with someone hijacking your domain via DNS so, no reason to set DNSSEC. Again, that is my opinion though.

---

<div class="post-metadata">

**Author:** ![amicheals](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/a/a88e57/32.png) [@amicheals](https://discourse.mailinabox.email/u/amicheals)\
**Post date:** [February 11, 2020, 5:58pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/5 "2020-02-11T17:58:32Z")

</div>

Thank you very much for your detailed response

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [February 18, 2020, 5:58pm UTC](https://discourse.mailinabox.email/t/dnssec-causes-dns-records-to-fail/5994/6 "2020-02-18T17:58:33Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.